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comply  with  data  security  laws.  They  also  help  them  avoid  ethics  disasters,  page  22 


COMPUTERWORLD.COM 


Inside 


Opinion 

The  fight  against 


Security 
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THE  BARRIERS  TO  VIRTUALIZATION  FALL  AWAY. 


THE  VIRTUAL.  THE  PHYSICAL. 


YOU  COMMAND  THEM  BOTH. 


HOW  FAR  WILL  YOU  TAKE  VIRTUAL? 


Microsoft  1  Virtualization 


tion  officials  want  EU 
regulators  to  r«j«ct 


browser  choice  in  Windows  7. 


1  the  marketplace  if  il 


■  DEPARTMENTS 

12  The  Grill:  Media  Grid  founder 
Aaron  E.  Walsh  has  devoted 
his  career  to  immersive  education, 
which  combines  interactive  virtual 
reality  and  digital  media  with  collab¬ 
orative  online  course  environments. 
32  Security  Manager's 
Journal:  Woos  Hang  Up  Now 
Phone  Policy.  A  global  company 
is  certain  to  have  many  different 
kinds  of  mobile  devices.  And  that 
variety  is  just  one  of  several  road¬ 
blocks  that  slow  the  adoption  of 


Analysts  say 
lob  and  budget 
/m  cuts  could  be 
«  to  blame  for 
t  recent  wave  of  shutdowns  ol 
ntemet-based  services. 


companies  hope  to  use  flash  stor- 


■  Social.  Get 
a  Job.  That's 
the  advice  of 
career  expert  and  HP  user  group 
president  Nina  Buik,  who  advises 
IT  professionals  to  connect  with 
one  another  both  inside  and  outside 
the  office. 

38  Shark  Tank:  The  CFO  must 
have  been  half-asleep  when  he  came 
up  with  a  half-baked  idea  to  save 
money  on  a  temp  IT  worker. 


flash  technol- 

HMH  ogycouldbe 
as  significant  for  IT  as  the  move  to 
multicore  CPUs  was. 


28  Free 
Up  Cash! 

Inventory  optimization 
saves  wortdng  capital 


says  if  we  don't  fix  things  now.  the 
Internet  of  2011  is  going  to  be  one 
heckofamess. 


■  FEATURES 

16  Laid  Off?  Here’s  Your  Net 

Networking  organizations  encourage  laid-off  IT  managers 
to  help  one  another  through  stressful  transitions. 
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RESPOMSESTO: 

Tech  Grad  Who  Can’t 
Find  Job  Sues  to 
Get  Tuition  Back 

Aug.  3. 2009 

Something  is  wrong  when  you  work 
your  butt  off  and  pay  $70k  and  can’t 
find  a  job.  I  question  the  entire  sys¬ 
tem.  I  say  boycott  all  4-year  colleg¬ 
es.  Employers  can  train  on  the  job. 

■  Submitted  by:  Anonymous 

Sure,  go  ahead  and  boycott  second¬ 
ary  education,  and  make  my  bach¬ 
elor’s  degree  just  that  much  more 
valuable  in  a  tight  labor  market. 

■  Submitted  by:  Anonymous 

You  pay  $70k  for  the  education,  not 
a  job  guarantee. 

The  thing  that  is  wrong  is  that 
the  economy  crashed  and  no  one  is 
hiring.  Companies  are  either  having 
layoffs  or  have  hiring  freezes. 

■  Submitted  by:  Meh 

What  university  does  not  have  ca¬ 
reer  counseling  and  job  placement 
services?  It’s  part  of  their  market¬ 
ing.  If  the  student  has  good  grades 
and  can’t  find  a  job,  then  the  school 


is  guilty  of  false  advertising.  She’s 
due  a  partial  refund,  at  least. 

■  Submitted  by:  Anonymous 

Why  would  anyone  hire  Ms. 
Thompson  now?  If  she  doesn’t  get  a 
promotion,  will  she  sue  her  employ¬ 
er?  She  didn’t  really  help  herself  out. 
Maybe  she  should  sue  herself. 

■  Submitted  by:  Anonymous 

Why  is  it  the  responsibility  of  the 
school  to  find  a  job  for  the  student, 
assuming  it  made  no  promises? 

While  “career  services”  were  help¬ 
ful,  I  found  my  first  job  out  of  college 
(and  after  graduate  school)  on  my 

own  through  the  normal  means.  I 
used  job  sites,  sent  out  resumes  (pa¬ 

per  and  electronic)  and  networked. 

■  Submitted  by:  Anonymous 

This  situation  is  one  of  the  many 
reasons  why  we  in  my  family  be¬ 
lieve  that  every  teen  should  work 
in  the  retail  trade  in  high  school.  It 
teaches  you  not  to  be  so  entitled. 

■  Submitted  by:  Anonymous 


JOIN  THE  CHATTER!  You,  too,  can 
comment  directly  on  our  stories. 
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The  end  of  phone  tag.  Turn  your  desk  phone  and  mobile  phone  into  one  with 
Sprint  Mobile  Integration.  YouV  have  one  number,  one  voicemail  and  one  easy  way  to  control 
mobile  usage.  Simplify  the  way  your  company  stays  in  touch.  Make  it  easier  tor  clients  to  reach 
you.  And  reduce  company  telecom  expenses.  Less  dialing,  happier  clients.  Productivity  starts  now. 
1-800-SPRINT-1  sprintcom/convergence 


News, 


U.S.  Says  SQL  Injection 
Caused  Major  Breaches 


techniques  to  steal  Gonzalez  had  been 

huge  amounts  of  data  from  indicted  earlier  by  grand 

Heartland  Payment  Sys-  juries  in  Massachusetts 


MONDAY:  The  2009  Air  Force  Information  Technology 
Conference,  hosted  by  the  754th  Electronic  Systems 
Group,  opens  today  in  Montgomery.  Ala.  About  6.000 
attendees  are  expected  at  the  event,  which  continues 
through  Thursday. 


sophisticated  packet-sniffing 
tools  and  other  malware  to 
detect  and  steal  payment  card 
data  flowing  over  the  victim 
companies’  networks,  accord¬ 
ing  to  court  documents. 

SQL  injection  attacks 
take  advantage  of  a  vulner¬ 
ability  that  appears  when 
*  a  Web  application  fails  to 
properly  filter  or  validate 
data  a  user  enters  on  a  Web 
page  to  order  a  product  or 
communicate  with  a  com¬ 
pany.  An  attacker  can  send 
a  malformed  SQL  query  to 
the  underlying  database  to 


code  or  access  other 
systems. 

“We  see  SQL  in¬ 
jection  as  the  top  j 
attack  technique  ; 
on  the  Web,”  said  \ 
Michael  Petitti, 
chief  marketing 


IBM  Using 
DNA  in 
New  Chips 


bination  of  DNA  molecules 
and  nanotechnology  to  cre¬ 
ate  tiny  circuits  that  could 
form  the  basis  of  smaller, 
more  powerful  and  energy- 


cheaper  to  manufacture. 
IBM  said  last  week  that  it's 


ft 


a  security  firm  whose 
clients  include  Heartlan 
Launching  such  attack 


The  ability  for 
the  DNA  structures 

lead  to  greater  precision  in 
the  design  and  manufacture 
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the  company's  executive  base  ance  and  financial  services 
for  five  years,  the  academy  markets, 
said  in  S  statement. 

Lenovo  declined  to  comment.  //  >'  ■  Xm  v-vn . 


China  Looks  to 
Cut  Lenovo  Stake 

-The  Chinese  Acad¬ 
emy  of  Sciences,  a  state-run 
research  institute,  announced 
earlier  this  month  that  it  is 
looking  to  sell  part  of  its  65% 
stake  in  Legend  Holdings  Ltd.. 
the  parent  company  of  Lenovo 
Group  Ltd.,  for  2.76  billion 
yuan  (S404  million  U.S.). 

The  planned  sale  of  a 
29%  stake  would  reduce  the 
academy's  holdings  in  the  PC 
maker  to  35%,  according  to  a 
spokesman.  The  government  is 
seeking  a  buyer  with  expertise 
in  capital  management  and 
marketing,  he  added. 

The  buyer  must  agree  not  to 
resell  its  stake,  alter  Legend's 
strategy  or  propose  changes  to 


HP’s  Mphasis  to  Buy 
AIG  Services  Unit 

India  -  Hewlett- 
Packard  Co.'s  Mphasis  ser¬ 
vices  subsidiary  this  month 
agreed  to  acquire  AIG  Systems 
Solutions  Ltd.,  the  Indian  IT 
services  arm  of  New  York- 
based  insurer  American 
International  Group  Inc.,  for 
an  undisclosed  sum. 

The  AIG  unit  employs  800 
people  in  Chennai  and  Kolkata 
and  provides  IT  services  to  AIG 
units  worldwide. 

Ganesh  Ayyar.  CEO  of 
Bangalore-based  Mphasis. 
said  the  acquisition  should 
boost  his  firm's  presence 
and  expertise  in  the  insur- 


Amity  University  in  Noida,  India, 
last  week  announced  plans  to 
offer  online  IT  degree  programs 
to  100.000  students  on  the  Afri¬ 
can  continent  over  the  next  five 
years.  The  S116  million  (U.S.) 
program  to  train  students  in  53 
countries  is  being  funded  by  the 
government  of  India.  The  coun¬ 
try  hopes  the  investment  will 
help  boost  Indian  sales  of  tele¬ 
communications  gear  in  Africa. 
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tion,  and  Harvey  Anderson, 
Mozilla's  chief  counsel,  last 
week  wrote  lengthy  blog 
posts  citing  their  concerns 
about  the  Microsoft  pro¬ 
posal  and  spelling  out  the 
changes  they  want  to  see  in 
Windows  7. 

John  Lilly,  Mozilla's  cur¬ 
rent  CEO,  called  the  blog 
posts  “part  of  our  effort  to 
get  across  our  point  of  view. 
In  principle,  [Microsoft’s 
proposal]  sounds  good,  but 
in  practice,  the  way  they 
implement  it  will  make  a  big 
difference.” 

In  one  of  last  week’s 
Baker  argued  that  even  if 
the  plan  were  accepted,  IE 
would  enjoy  most-favored- 
browser  status.  “Even  if 
everything  in  the  currently 
proposed  settlement  is  im¬ 
plemented  in  the  most  posi¬ 
tive  way,  IE  will  still  have  a 
unique  and  uniquely  privi¬ 
leged  position  on  Windows 

»  AUGUST 


Microsoft  Warns  of  Chaos 
If  Word  Sales  Are  Halted 


Microsoft  corp. 
warned  last 
week  that  an 
injunction  preventing  it 
from  selling  Word  in  the 
U.S.  after  Oct.  10  would 
cause  “massive  disrup¬ 
tions”  to  sales  of  its  Of¬ 
fice  software,  as  well  as 
to  key  partners  like  Best 
Buy  Co.,  Dell  Inc.  and 
Hewlett-Packard  Co. 


□a 


ner  at  New  York  law 
firm  Pryor  Cashman 
LLP  who  has  practiced 
patent  and  trademark 
law  for  17  years,  said  that 
Davis'  conclusion  that 
Microsoft  willfully  in¬ 
fringed  on  the  i4i  patent 
will  probably  hurt  the 
company’s  chances  for 
an  injunction. 

In  a  65-page  summary 
opinion,  Davis  said  that 
Microsoft  knew  of  the 
patent  held  by  i4i  as  ear¬ 
ly  as  2001  but  neverthe¬ 
less  set  out  to  make  the 
Canadian  developer’s 


AVAILABLE, 
EVEN  WHEN 
YOU’RE  NOT. 


vices  that  have  been  hit 
with  outages.  And  based  on 
news  reports,  the  number 
of  such  incidents  appears 
to  have  been  increasing  in 
recent  months,  analysts 
said.  They  cited  shutdowns 
of  the  Google  Apps  software 
hosted  by  Google  Inc.,  out- 


Observers  pointed  to  sev¬ 
eral  possible  reasons  for  the 
apparent  uptick  in  online 
outages,  including  IT  budget 


Kurt  Roemer,  chief  secu¬ 
rity  strategist  at  Citrix  Sys¬ 
tems  Inc.  in  Fort  Lauderdale, 
Fla.,  said  he  wonders  wheth¬ 
er  a  two-hour  shutdown  of 
Cisco  Systems  Inc.'s  Web  site 
this  month  “would  (have] 
happened  a  few  years  ago . . . 
when  they  had  multiple 


Cutbacks  Could 
Be  Causing  IT 
Outages 

Analysts  say  buaget  and  job 
cuts  could  be  to  blame  for  a 
spike  in  service  disruptions. 

By  Patrick  Thibodeau 


people  checking  every  single 
change."  Cisco  blamed  the 
outage  on  human  error. 

IT  staff  cuts  spurred  by  the 
economy  are  likely  to  contin¬ 
ue  throughout  the  remainder 
of  the  year.  According  to  a 
survey  of 300  IT  center  man¬ 
agers  last  year  by  the  Asso¬ 
ciation  for  Computer  Opera¬ 
tions  Management,  half  of  all 
data  centers  were  planning 
to  cut  2009  budgets  by  an 
average  of  15%.  Respondents 


at  14%  of  those  companies 
said  the  cuts  would  include 
layoffs  of  IT  staffers. 

Ken  Brill,  executive  direc¬ 
tor  of  Uptime  Institute  Inc.,  a 
data  center  engineering  and 
consulting  firm,  said  such 
budget  and  personnel  cut¬ 
backs  can  prove  disastrous 
to  IT.  "We’re  not  doing  the 
maintenance  we  should  be 
doing,  and  when  you  don't  do 
maintenance,  you  increase 
the  probability  of  catastroph- 


ness  will  probably  su 
despite  periodic  outs 
“The  Internet  is  in  a 


aren't  changing  their  minds 
about  using  hosted  services. 

For  example,  Ted  Mau- 
hicci,  CIO  at  real  estate 
developer  Tridel  Corp.  in 
Toronto,  defended  the  dura¬ 
bility  of  hosted  data  center 
systems,  despite  the  fact  that 
his  provider  had  suffered  an 
outage.  “Five  years  ago,  it 
was  not  uncommon  to  expe¬ 
rience  the  odd  interruption, 
whereas  today  it  has  been 
pretty  rock-solid,  other  than 
the  major  failure  that  hap¬ 
pened,”  he  said. 

Neal  Puff,  CIO  for  Yuma 
County,  Ariz.,  agreed,  even 
though  the  county  moved  its 
ERP  system  from  a  cloud- 
based  provider  back  in-house 
last  year.  Puff  said  he  still 
believes  that  “a  well-run 
hosted  solution  with  reliable 
connections  will  perform 
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IS  POWER 

The  power  of  virtualization. 


Simplicity  is  essential.  At  Citrix,  we  believe  enterprise 
computing  has  become  far  too  complex.  Web-era  companies  have 
changed  the  rules.  With  cloud  computing  and  software  as  a  service,  it's  now  about 
minutes  instead  of  months,  pennies  instead  of  dollars.  It's  time  for  enterprise  IT 


to  embrace  a  service-oriented  model  that's  powerful,  versatile  and  cost-effective. 


In  short,  it's  time  for  IT  leaders  to  step  up  and  simplify. 


Simplicity  is  flexibility.  We  believe  in  virtualization.  Instead  of  grappling  with  infinite 
combinations  of  desktops,  applications  and  server  workloads,  virtualization  allows  you 
to  manage  one  copy  of  each.  Assemble  them  dynamically  at  runtime.  And  deliver  as 
rich,  personalized,  on-demand  services. 

Simplicity  is  savings.  We  harness  the  power  of  virtualization,  networking.and  the 
cloud  to  dramatically  reduce  the  cost  of  computing.  To  put  unprecedented  control 
into  the  hands  of  IT.  To  keep  your  business  competitive.  Profitable.  Unstoppable. 


Simplicity  is  power.  Citrix.  Citrix.com/SimplicitylsPower. 


CITRIX 
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The  Cloud  Could  Be  a 
Boon  for  Flash  Storage 


Web-based  companies  are 
hoping  to  use  the  technology 
to  speed  user  access  to  hosted 
data.  By  Stephen  Lawson 


The  data  centers  of  cloi 
based  companies  are  so  b 
that  all  of  those  benefits 


MySpace  expects  that 
flash  storage  could  save 
space  in  data  centers  while 
still  supporting  the  fast  page 
loads  that  users  demand,  ac¬ 
cording  to  Buckingham.  By 
replacing  disk  drives  with 
flash  technology,  MySpace 
can  use  1U  servers  instead 
of  taller  2U  models,  which 
would  save  a  lot  of  space  in  a 
company  whose  data  centers 
collectively  occupy  60,000 
square  feet. 

MySpace  also  hopes  to  one 
day  use  flash  technology  to 
cache  frequently  used  data 
and  to  maintain  indexes  for 
searches,  Buckingham  said. 

However,  the  social  net¬ 
working  company  won't  rely 
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Aaron  E.  Walsh 

An  early  interest  in  virtual  reality 
blossomed  into  a  passion  for  education 
environments  that  can  engage  students 
through  interactive  visualization. 


me  making  video  games.  I  would  go 
in  to  my  mom’s  purse,  take  quarters 
and  walk  the  half  mile  to  Safeway  to 
play  Asteroids  or  Centipede.  But  I 
also  knew  all  I  was  doing  was  playing. 
When  I  was  around  18, 1  took  a  pretty 
hard  line  with  myself  and  decided  if 
I’m  going  to  constantly  spend  my  time 
in  virtual  reality,  I’m  going  to  work  in 
virtual  reality,  not  just  play. 


What  happened  then?  I  bmlt  my  first 


Aaron  E.  Walsh's  career  path  isn’t 
strewn  with  traditional  milestones. 
Since  the  age  of  18,  when  he  was  hired 
as  a  computer  equipment  operator  at 
Boston  College,  where  he  now  teaches, 
Walsh  has  been  pretty  single-minded 
about  one  thing:  bolstering  education 
through  the  innovative  use  of  virtual 
reality  technology. 


After  five  years  at  the  college  (where 
officials  hadn’t  a  due  he  was  still  a 
teenager  when  they  hired  him),  Walsh 
founded  Mantis  Development  Corp.,  a 
software  firm  that  specializes  in  digital 
media  and  network  computing.  He  then 
used  several  million  dollars  in  profits 
from  that  venture  to  launch  and  person¬ 
ally  fund  the  Media  Grid ,  a  public  in- 


virtual  reality  system  from  scratch  in 
about  1990.  It  was  built  on  a  Macintosh 
and  [a  friend  and  D  had  stereo  headsets 
and  a  power  glove  so  you  could  reach 
out  and  manipulate  things.  We  were 
a  spaceship  going  down  corridors.  I 
had  been  playing  this  video  game  on 
a  keyboard,  but  when  I  was  in  a  truly 
Continued  on  page  14 
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Smarter  technology  for  a  Smarter  Planet: 

Is  your  information 
withholding  information? 

Most  businesses  have  a  data  management  strategy.  And  another.  And  another.  One  for  every  application: 

ERP,  CRM,  SCM,  HRM,  etc.  The  result  is  a  proliferation  of  siloed,  disjointed  data  that  gets  in  the  way  of 
smart  decisions.  An  Information  Agenda  from  IBM  moves  you  from  an  application-centric  approach  to  your 
information  toward  a  more  holistic  view  of  your  information  systems.  So  you  can  make  use  of  your  data 
to  make  decisions  faster  and  with  greater  confidence  -  helping  you  optimize  processes,  predict  market 
changes  and  act  on  new  opportunities.  Banks  can  better  manage  financial  risk.  Retail  companies  can 
spot  trends.  Manufacturing  companies  can  speed  delivery  across  a  complex  supply  chain.  So  information 
works  for  us,  instead  of  vice  versa. 

A  smarter  business  needs  smarter  software,  systems  and  services. 

Let's  build  a  smarter  planet,  ibm.com/mfoagenda  ,  _  _  _  _ 


Ml  had  an 
intuitive 
sense  that 

[virtual  environments] 
could  make  it  easier 
for  people  to  absorb 
complicated  informa¬ 
tion,  more  so  than 
reading  could. 


an  amazing  feeling.  I  still  remember 
the  two  of  us  waving  our  arms  around 
controlling  this  spaceship.  That’s  what 
started  it  all  for  me. 

How  did  that  toad  to  the  Immersive  Edu¬ 
cation  Initiative?  I  was  catalyzed  by 
the  ability  to  create  a  system.  I  started 
to  really  get  a  sense  that  this  could 
impact  learning.  I  had  an  intuitive 
sense  that  this  could  make  it  easier  for 
people  to  absorb  complicated  infor¬ 
mation,  more  so  than  reading  could. 


itoes  and  do  cross-pollination 
er  plants  and  see  them  grow, 
in  ability  to  fly  though  the 


How  is  learning  in  the  virtual  world  bet¬ 
ter?  What  are  the  benefits?  In  order  to 
learn,  you  need  to  engage  the  mind, 
and  immersive  education  is  engaging 
We  saw  this  even  before  we  got  back 
studies  proving  this.  We  saw  kids  lock¬ 
ing  into  these  virtual  environments 
and  not  letting  go.  I’d  tell  students 
playing  an  interactive  game  about  the 
Boston  Tea  Party  to  spend  an  hour 
exploring  the  ship  and  exploring  the 
tea.  They’d  spend  five  or  six  hours  be¬ 
cause  they  said  they  were  having  fun. 
There’s  also  something  about  doing, 
rather  than  just  hearing  or  seeing  If 
you  can  do  what  you’re  supposed  to 
be  learning,  you  learn  better.  This  is 
something  that’s  borne  out  over  and 
over  again  in  studies  about  immersive 
education.  Students  learn  faster  and 


Who  creates  the  immersive  education 
content  on  the  Media  Grid?  Educators, 
students  —  anyone  else  who  is  a  mem¬ 
ber.  Members  need  to  provide  creden¬ 
tials  that  show  they're  affiliated  with 
a  school.  As  long  as  they  are  affiliated 
with  a  school  —  a  teacher,  student, 
administrator  or  someone  connected 
with  education  —  they’re  eligible  for 
general  membership.  They  can  get 
access  to  the  technology  for  free,  they 


thing  brand-new  that  doesn  t  have  a 
track  record.”  But  in  each  school,  you 
find  the  fairly  young  teachers.  We  have 
young  educators  who  were  raised  on 
digital  media  and  digital  entertain¬ 
ment,  and  they  get  it.  But  it’s  true. 
These  technologies  are  not  used  to 
teach  to  a  test. 

Immersive  education  is  not  going  to 
boost  test  skills.  We  have  schools  using 
these  technologies  because  they  see 
that  kids  come  in  and  want  to  take  the 
class.  Normally,  these  same  kids  might 
be  tardy,  but  now  they're  showing  up 
because  they  know  the  class  will  have 
this  technology.  Right  now,  it’s  an 
engagement  tool.  You  need  to  engage 
them  before  they  can  start  to  learn. 

When  will  you  know  you’ve  succeeded? 

When  anyone  with  access  to  a  com¬ 
puter  can  get  a  quality  education  at 
no  cost.  I  think  education  is  a  funda¬ 
mental  human  right.  We  will  develop 
a  comprehensive  and  complete  form 
of  study  so  someone  with  access  to 
a  computer  could  take  rich,  compel¬ 
ling  courses  and  learn  at  the  same 
level  as  someone  going  to  a  university. 
With  simulations  and  virtual  environ¬ 
ments,  we’ll  have  such  a  large  body  of 
information  that  it  will  be  up  to  the 
individual  to  decide  what  they  want  to 
learn.  The  role  of  schools  will  morph 
over  time.  I  think  the  purpose  of  a  lot 
of  brick-and-mortar  institutions  will 
come  down  to  making  human  connec¬ 
tions.  The  experiences  of  networking 
with  friends  and  meeting  with  faculty 
face-to-face  will  be  the  differentiat¬ 
ing  factors  of  [physically!  going  to  the 
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Executive  support  networks 
help  CIOs  achieve  a  soft 
landing.  By  Mary  Brandel 

WHEN  WADE  VANN,  former  CIO 
at  Simmons  Bedding  Co.,  was  laid 
off  in  the  summer  of 2008,  it  was 
naturally  a  difficult  time.  “When 
you've  been  working  60  to  70  hours 
a  week  and  that  goes  away,  it's  a  big  deal,”  Vann  says. 
“There's  a  lot  of  stress  you've  never  had  to  deal  with 
before,  including  your  own  sense  of  self-worth." 

What  cushioned  the  blow,  he  says,  were  the  network¬ 
ing  groups  he  joined  that  not  only  helped  him  maintain 
a  routine,  meet  people  he  otherwise  would  never  have 
met  and  fine-tune  the  logistics  of  his  job  search,  but  also 
provided  a  generous  helping  of  emotional  support  and 


specific  job  leads.  “I  was  amazed  at  the  amount  of  help,” 
says  Vann,  who  recently  accepted  a  CIO  position  at 
Augusta  Sportswear  Inc.  in  Augusta,  Ga.  In  one  group, 
he  says,  to  be  accepted  as  a  member,  you  had  to  have  a 
pay-it-forward  attitude  in  terms  of  helping  others  —  not 
yourself  —  find  a  job,  even  though  other  laid-off  CIOs 
(Le,  competitors)  were  members  as  well. 

To  Vann,  networking  is  the  key  to  most  successful  job 
searches.  “It  takes  a  lot  of  work  to  spend  a  major  por¬ 
tion  of  your  day  making  cold  calls,  but  it  does  pay  off, 
and  I've  developed  relationships  with  people  I  will  stay 
in  touch  with  for  the  remainder  of  my  career,”  he  says. 
“That  part  of  the  transition  has  been  a  true  blessing" 

Generally,  networking  groups  for  executives  in 
transition  meet  once  a  week  to  once  a  month  and  pro¬ 
vide  a  variety  of  services,  including  expert  speakers 
on  career  transition  topics,  job  leads  from  affiliated 
outplacement  firms,  and  group  meetings  for  network- 
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in;:.  As  Vann  found,  the  number  of  such 
groups  is  growing,  as  are  the  ranks 
of  the  jobless  in  networking  groups 
intended  for  both  employed  and  un¬ 
employed  executives.  He  says  a  couple 
of  the  networks  he  was  in  outgrew  the 
facilities  they  used  for  meetings. 

Case  in  point:  the  Executive  Network 
Croup  of  Greater  Chicago.  A  nonprofit 
organization  that's  been  in  business  19 
years.  ENG  has  seen  its  membership 
more  than  double  since  the  beginning 
of  the  year,  to  366  members,  according 
to  Executive  Director  Chris  Campbell. 
Attendance  at  ENG's  monthly  meetings 
has  substantially  increased,  to  the  point 
where  the  group  has  to  turn  away  some 
people  because  the  room  bolds  a  maxi¬ 
mum  of  200. 

If  there's  a  silver  lining  to  the  ram¬ 
pant  layoffs  from  the  recession,  it  might 
be  the  support  that  displaced  executives 
are  providing  to  one  another,  both  on¬ 
line  and  off.  "Most  of  these  executives 
have  never  had  to  figure  out  what  it's 
like  not  to  have  a  job.  but  everyone  has 
a  pay-it-fbrward.  'we're  all  in  this  to¬ 
gether'  attitude,"  says  Ryon  Harms,  who 
was  in  transition  tor  four  months  before 
accepting  a  position  as  director  of  Inter¬ 
net  marketing  at  EE1  Sports  Medicine 
in  San  Diego.  Harms  also  cn-founded  a 
networking  organization  called  Pacific 
Executive  Network  and  runs  a  blog 
advising  executives  about  using  social 
media  to  expand  their  networks.  “It's 
interesting  to  see  everyone  helping  each 
other  out  with  no  real  expectation  that 
the  person  would  help  them  back  but 
that  somebody  else  in  the  community 

mission  statements  of  some  groups.  At 
the  Technology  Executives  Networking 
Group  (TENG),  for  instance,  members 
are  expected  to  share  at  least  three  job 
leads  per  month,  including  leads  they 
are  actively  pursuing  or  for  which  they 
could  be  a  candidate.  The  rationale: 
Nearly  any  position  would  likely  have 
hundreds  of  applicants  who  could  do 
the  job,  so  adding  a  few  more  won’t  sig¬ 
nificantly  impact  anyone's  chances,  and 
the  benefits  of  having  a  friend  land  the 


been  doing,  it  holds  you  accountable,"  he 
says  "You  don't  want  to  say  you  played  golf 
three  days  that  week  and  nothing  else," 


After  joining  the  Executive  Network  Group 
of  Greater  Chicago  (ENG),  Dennis  Burnell 


helped  one  another  finesse  their  responses 
to  typical  interview  questions,  "It  takes  an 
uncomfortable  process  and  makes  it  more 
functional  and  productive,"  says  Burnell 
The  results  show:  His  own  work  team 


I  job  far  outweigh  the  downside  of  com¬ 
peting  with  a  few  more  candidates. 

Other  groups  are  less  formal,  but  the 
expectation  is  that  members  will  pro¬ 
vide  what  Vann  calls  “a  warm  intro¬ 
duction."  So  when  a  member  targets  a 
company  that  seems  to  be  a  good  fit  for 
his  background,  it's  expected  that  he 
should  be  able  to  ask  fellow  members 
of  the  network  if  they  can  introduce 
him  to  key  executives  at  the  company. 

Either  way.  one  thing  is  for  sure:  For 
executives,  networking  has  become  as 
much  a  part  of  this  recession  as  clipping 
coupons  and  cutting  the  cable  TV  sub¬ 
scriptions.  “Everyone  figures  out  quickly 
I  that  networking  with  fellow  executives 
I  is  the  only  way  to  get  through  the  clutter 


of  submitting  resumes  that  get  lost  in  a 
pile  with  thousands  of  others."  Harms 
says.  “So  they’re  joining  networks,  shak¬ 
ing  other  people’s  hands  and  seeing  how 
they  can  help  each  other  find  a  job." 

If  you're  thinking  of  joining  a  net¬ 
work.  here's  some  advice  from  other 
laid-off  executives  who  have  either 
found  new  jobs  or  are  otherwise  reap- 

IT’S  NOT  ALL  ABOUT  A  JOB 

When  Tom  Siko  was  laid  off  in  2007 

quired  by  Computer  Sciences  Corp..  he 
had  spent  25  years  in  IT.  the  majority 

networks  -  ENG  and  the  Technology 
Leaders  Association,  in  which  about 
40%  of  the  members  arc  in  transition  at 
any  given  time.  Both  networks,  he  says, 
arc  great  support  groups,  above  and  be¬ 
yond  their  job  search  benefits.  “You  see 

sometimes  even  people  you  know,  and 
they  all  have  a  positive  attitude,  which 
helps  a  lot  in  this  situation.”  he  says. 
Vann  agrees.  “You  have  very  little 

difficult  thing.”  he  says.  For  instance, 
it's  easy  to  sit  in  your  home  office  and 
get  discouraged,  especially  when  you 
go  through  a  period  of  not  getting 
any  leads.  But  if  six  other  people  you 
respect  say  they  also  aren't  seeing  op¬ 
portunities.  it  provides  perspective.  “If 
I  was  at  home,  with  no  one  to  talk  to, 

I’d  get  real  concerned.  But  by  listening 
to  others.  I  can  think  maybe  it's  not  so 
bad  after  all,”  Vann  says. 

GO  BEYOND  THE  UNEMPLOYED 

While  it’s  important  to  network  with  un¬ 
employed  peers,  it’s  equally  important 
to  network  with  employed  professionals, 
particularly  hiring  managers.  Vann  rec¬ 
ommends  spending  about  one-third  of 
your  time  networking  with  unemployed 
people  and  the  rest  with  people  who 
have  jobs.  “If  you're  working  on  a  par¬ 
ticular  company  that  seems  to  have  op¬ 
portunities.  try  to  find  people  who  work 
in  that  organization  who  can  help  you 
better  target  open  positions.”  Siko  says. 


M  Everyone  figures  out  quickly  that  networking  with  fellow  executives  is  the 
only  way  to  get  through  the  clutter  of  submitting  resumes  that  get  lost  in  a 
pile  with  thousands  of  others,  ryon  harms,  co-founder,  pacific  executive  network 


ing.  As  Vann  found,  the  number  of  such 
groups  is  growing,  as  are  the  ranks 
of  the  jobless  in  networking  groups 
intended  for  both  employed  and  un¬ 
employed  executives.  He  says  a  couple 
of  the  networks  he  was  in  outgrew  the 
facilities  they  used  for  meetings. 
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If  there’s  a  silver  lining  to  the  ram¬ 
pant  layoffs  from  the  recession,  it  might 
be  the  support  that  displaced  executives 
are  providing  to  one  another,  both  on¬ 
line  and  off.  “Most  of  these  executives 
have  never  had  to  figure  out  what  it's 
like  not  to  have  a  job,  but  everyone  has 
a  pay-it-forward,  ’we’re  all  in  this  to- 


duction.”  So  when  a  member  targets  a 
company  that  seems  to  be  a  good  fit  for 
his  background,  it’s  expected  that  he 
should  be  able  to  ask  fellow  members 
of  the  network  if  they  can  introduce 
him  to  key  executives  at  the  company. 

Either  way,  one  thing  is  for  sure:  For 
executives,  networking  has  become  as 
much  a  part  of  this  recession  as  clipping 
coupons  and  cutting  the  cable  TV  sub¬ 
scriptions.  “Everyone  figures  out  quickly 
that  networking  with  fellow  executives 
is  the  only  way  to  get  through  the  clutter 


00  BEYOND  THE  UNEMPLOYED 

While  it's  important  to  network  with  i 
employed  peers,  it’s  equally  important 
to  network  with  employed  professions 
particularly  hiring  managers.  Vann  re 
ommends  spending  about  one-third  ol 
your  time  networking  with  unemployi 
people  and  the  rest  with  people  who 
have  jobs.  “If  you’re  working  on  a  par¬ 
ticular  company  that  seems  to  have  oj 
portunit  ies,  try  to  find  people  who  wo 
in  that  organization  who  can  help  you 
better  target  open  positions,"  Siko  say: 


Everyone  figures  out  quickly  that  networking  with  fellow  executives  is  the 
only  way  to  get  through  the  clutter  of  submitting  r6sum6s  that  get  lost  in  a 
pile  with  thousands  of  others,  ryon  harms,  co-founder,  pacific  executive  network 
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being  formed,  five  of  the  eight  mem¬ 
bers  had  landed  a  job,  including  Vann. 
What  Siko  likes  about  ENG  is  that  it 


your  perspective  as  to  where  you  want 
to  go,”  he  says.  There  are  only  so  many 
CIO  positions,  he  points  out,  “so  you'd 
better  look  at  more  transferable  skills." 

PAY  IT  FORWARD 

The  expectation  at  many  executive  net¬ 
working  groups  is  that  you  should  be  as 
willing  to  help  out  others  as  you  are  to 
accept  help  for  yourself.  This  isn’t  only 
for  altruistic  reasons.  As  TENG's  Web 
site  explains,  “By  helping  our  peers  solve 
key  problems,  we  demonstrate  our  value 
in  tangible  terms  and  position  ourselves 
above  the  crowd.”  The  people  you  help 
will  remember  you  —  particularly  your 
self-confidence  and  selflessness,  it  says. 

That  helps  build  what  Harms  calls 
“social  capital."  And  thanks  to  social 
media,  you  can  spread  a  wider  net  by 
benefiting  from  the  indirect  reciprocity 
that  online  communities  enable.  “With 
direct  reciprocity,  you  do  someone  a 
favor,  and  they  do  you  a  favor  back,”  he 
says.  “With  indirect  reciprocity,  you  do 
someone  in  your  community  a  favor  in 
anticipation  that  someone  else  within 
the  community  will  return  the  favor." 

LEARN  TO  USE  SOCIAL  MEDIA 

Both  Siko  and  Burnell  make  use  of 
Linkedln  in  addition  to  face-to-face 
networking.  Siko  says  the  site  has  been 
very  useful  in  helping  him  identify 


transition  to  start  a  blog.  Rather  than 
sending  the  typical  “Is  the  job  still 
available?”  e-mail,  you  can  send  po¬ 
tential  employers  posts  that  talk  about 
your  industry  or  something  that's  use¬ 
ful  to  their  day-to-day  work,  he  says. 
He  sees  blogs  eventually  supplanting 
resumes  as  a  means  of  showcasing 
your  capabilities  to  employers. 

00  BEYOND  ONLINE  NETWORKS 

While  there's  a  lot  to  be  said  for  social 
media,  don’t  let  it  completely  replace 


Sites  like  Linkedln  don't  display  all  the 
contacts  people  have,  since  some  execu¬ 
tives  shy  away  from  connecting  on  a  so¬ 
cial  network  for  fear  of  looking  disloyal 
to  their  current  employers. 

00  BOTH  BROAD  AND  DEEP 

In  addition  to  the  quick  introductions  to 
people  that  networking  group  meetings 
afford,  it's  important  to  identify  people 
with  whom  you  feel  a  synergy  and 
meet  with  them  individually,  Siko  says. 
“When  you  foster  a  deeper  relationship, 
you're  more  apt  to  lot*  out  for  opportu¬ 
nities  for  each  other,”  he  says,  "and  tf  " 
where  true  networking  happens.”  ■ 
Brand*!  is  a  Computerworld 
contributing  writer.  Contact  her  at 
nmrybrandei@verizon.net. 
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Savvy  CIOs  do 
more  than  legal 
compliance. 
They  help  the 
business  avoid 
ethics  disasters. 
By  Mary  K.  Pratt 
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Ethics:  Harder 
In  a  Recession? 


■  NFORMATION  TECHNOLOGY 

■  consultant  Dana  L.  Smith  lays 

■  out  a  hypothetical  dilemma; 

■  Should  an  IT  department  hire  a 
more  expensive  vendor  because  the 
vendor  shares  its  own  company’s 
ethics  standards,  or  should  H  go  with 
a  lower-cost  provider  that  doesn't? 

Companies  with  established  ethi¬ 
cal  standards  that  guide  how  they 
conduct  business  frequently  confront 
this  kind  of  question.  Smith  says, 
but  it's  a  particularly  tough  question 
today,  given  the  recession. 

With  IT  departments  forced  to  cut 
budgets  and  staff.  CIOs  will  find  it 
difficult  to  allocate  dollars  for  applica¬ 
tions  that  promote  corporate  ethics. 

“The  decisions  were  easier  in  the 
days  when  the  economics  were  fa¬ 
vorable.  but  the  choices  may  have  to 
be  more  limited  now."  says  former 
CIO  John  Stevenson,  president  of 
consultancy  J6  Stevenson  Associ¬ 
ates.  “Now  it's  how  much  can  you 
afford  to  do  versus  how  much  do  you 
have  to  do  so  you  don't  get  burned.” 

Stevenson  says  companies  that  had 
moved  toward  certain  ethical  goals 
before  the  economic  crisis  -  whether 
those  goals  involved  green  initiatives 
or  corporate  responsibility  programs 
-  aren’t  giving  up  their  gains. 

“But  if  they  haven't  done  that  yet.  it 
gets  more  difficult  to  say  well  spend 
more  money  than  we  have  to,"  he  says. 

Even  when  CIOs  are  committed  to 
designing  systems  that  promote  ethi¬ 
cal  behavior,  they  usually  have  to  sell 
the  applications  by  promoting  what¬ 
ever  financial  benefits  the  tools  can 
create  -  and  not  on  any  particular 


M  [Ethics  represents] 
a  very  large  spend 
for  any  IT  organization, 
and  it  continues  to  grow. 

DIANE  BRYANT.  CIO.  INTEL  CORP.. 

ness’s  long-term  financial  interests 
rather  than  ethics. 

“He  was  afraid  to  [highlight  eth¬ 
ics],  because  he  thought  he  would  be 
perceived  in  the  wrong  way.”  Han- 

a  value-based  argument  will  have 
some  traction;  in  others,  it  will  be 
disregarded  or  even  ridiculed.' 

Diane  Bryant.  CIO  at  Intel,  says 
complying  with  ethical  standards  isn't 
cheap.  Consider,  she  says,  that  InteTs 

year,  driven  In  part  by  the  need  to  retain 
data  for  compiance  reasons  and  to  ful¬ 
fil  potential  e-discovery  requests. 

“We  do  certainly  taka  lot  about  the 
additional  costs  that  come  onto  IT 
with  aH  these  addHkmal  ethics  and  se- 


of  the  Markkula  Center  for  Applied 
Ethics  at  Santa  Clara  University,  says 
he  knows  a  »0  who  had  to  justify 
everything  by  taking  about  the  busi- 


it  continues  to  grow,"  Bryant  notes. 
“But  it's  talked  about  as  a  must-do. 

It's  an  accepted  part  of  the  IT  budget” 
-  MARY  K.  PRATT 


surveys  to  find  evidence  of  unethical 
behaviors  on  the  part  of  workers. 

Meanwhile,  companies  that  put  green 
initiatives  at  the  top  of  their  ethical  con¬ 
cerns  can  have  IT  create  applications 
that  track  energy  consumption  to  flag 
anomalies  that  indicate  inefficiencies  or 
calculate  the  corporate  carbon  footprint 
and  identify  ways  to  reduce  it. 

“You  have  to  step  back  a  minute  and 
ask.  ‘What  is  the  role  of  technology 
around  ethics?'  ”  says  Dena  L.  Smith, 
senior  technology  consultant  to  the 
board  of  trustees  at  Capital  University 
in  Columbus.  Ohio,  and  part  owner  of 
an  IT  consulting  firm  in  Dublin,  Ohio. 
“Technology  can  help  from  a  monitor¬ 
ing,  protection  and  prevention  stand¬ 
point  in  a  lot  of  ways.” 

The  notion  of  corporate  ethics 
hasn't  always  been  so  broad,  says  Mike 
Distelhorst.  a  law  professor  at  Capital 
University  Law  School,  a  former  ad¬ 
junct  professor  of  business  ethics  at 
the  Capital  School  of  Management  and 
Leadership  and  former  executive  di¬ 
rector  for  the  university's  Council  for 
Ethical  Leadership. 

MORE  THAN  COMPLIANCE 

Corporate  ethics  for  a  long  time  sim¬ 
ply  meant  compliance  with  laws  and 
regulations,  Distelhorst  says.  But  in  the 
early  1990s,  business  schools  started  to 
emphasize  the  idea  of  integrity-based 
ethics,  where  companies  developed  eth¬ 
ics  statements  based  on  their  own  values 
and  priorities  and  not  just  compliance 
with  federal  and  state  rules.  Motives 
range  from  pure  altruism  to  the  notion 
that  good  ethics  make  for  good  business. 

Still,  he  says,  few  companies  are 
leaders  in  integrating  their  corporate 
responsibility  programs  into  their  day- 
to-day  business  dealings. 

“You'd  be  hard-pressed  to  find  any 
company  that  doesn't  have  a  beautiful 
ethics  and  compliance  program."  Dis-  • 
telhorst  says.  “They're  talking  about  it. 
and  they're  working  it  all  out  in  various 
strategic  documents.  But  the  question 
is  whether  they're  actually  living  by  it. 
Some  are.  and  clearly  some  aren't." 

Regardless  of  where  a  company 
stands  in  the  process.  IT  leaders 
should  be  ready  to  contribute,  he  says. 

“These  policies  are  worked  out  on 
the  ethics  and  compliance  commit- 

Continued  on  page  2 6 
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Let's  cover  all  your  bases. 

Your  data  is  too  important  to  let  it  escape. 

We  can  reinforce  your  data  security  system.  Or  help  you  build  one 
from  the  ground  up.  With  our  variety  of  security  options, 
we'll  meet  any  of  your  security  needs.  Our  account  managers  and 
technology  specialists  are  ready  to  protect  you  and  your  data. 
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■  ETHICS 


Your  business 
is  always  on 
your  mind. 
Clearly, 

it's  on  ours,  too. 


'Highest  In  Customer  Satisfaction 
With  Small/Midsize  Business  Wireless 
Service,  Two  Years  in  a  Bow" 


Only  Verizon  Wireless  has  small  business 
specialists  in  every  store  to  help  you  do 
business  better. 


Continued  from  page  24 
tees  below  the  board  level,  and  they're 
having  the  CIO  as  a  key  player,”  Distel- 
horst  explains. 

That's  the  case  at  Intel  Corp.,  says 
the  company’s  CIO,  Diane  Bryant 

Intel’s  Ethics  and  Compliance  Over¬ 
sight  Committee  established  the  fol¬ 
lowing  five  principles  for  the  company 
and  its  workers:  Intel  should  conduct 
business  with  honesty  and  integrity; 
the  company  must  follow  the  letter 
and  spirit  of  the  law;  employees  are  ex¬ 
pected  to  treat  one  another  fairly;  em¬ 
ployees  should  act  in  the  best  interests 
of  Intel  and  avoid  conflicts  of  interest; 
and  employees  must  protect  the  com¬ 
pany's  assets  and  reputation. 

Intel’s  IT  staff  builds  and  maintains 
the  systems  that  allow  the  company 
to  meet  its  legal  and  regulatory  re¬ 
quirements,  such  as  those  laid  out  for 
accounting  and  governance  by  the 
Sarbanes-Oxley  Act  Bryant  says.  It  also 
developed  applications  and  a  team  of 
workers  to  handle  document  retention, 
which  is  crucial  should  there  be  a  legal 
case  with  electronic  discovery  requests. 

But  IT  also  enables  Intel  to  enforce 


ness  continuity  plans  and  environ- 

ethical  stances  that  match  Intel's  own. 
IT  has  also  delivered  sophisticated  sys¬ 
tems  that  monitor  the  power  consump¬ 
tion  and  carbon  dioxide  emissions  of 
Intel's  data  centers.  And  it  developed 
systems  that  monitor  for  potential  ma¬ 
licious  behavior,  such  as  violations  of 
access  management  rights  or  the  public 
release  of  Intel’s  intellectual  property. 

“We  put  solutions  in  place  that 
help  protect  Intel’s  five  principals,” 
Bryant  says. 

Few  companies  are  that  advanced  in 
their  use  of  technology  to  further  an 
ethical  agenda,  says  John  Stevenson,  a 
former  CIO  who  is  now  president  of  JG 
Stevenson  Associates  LLC,  an  IT  man¬ 
agement  consultancy  in  Plano,  Texas. 

“The  level  of  sophistication  offered 
by  CIOs  varies,”  he  says.  “Some  CIOs 
prefer  to  stand  back  and  hear  what  the 
companies  want  to  do.  They're  the 
ones  taking  orders.” 

Anemic  leaders  might  do  nothing 
more  than  block  access  to  inappropriate 
Web  sites,  Stevenson  says.  Those  at  the 
next  tier  might  deploy  applications  to 
comply  with  the  laws  that  govern  then- 
businesses,  but  they  probably  wouldn’t 
have  systems  that  monitor  or  report  on 
how  their  organizations  meet  higher-lev¬ 
el,  company-specific  ethical  objectives. 

“There  are  really  only  a  handful  of 
organizations  that  have  effectively 
used  IT  to  support  the  ethics  and  cor¬ 
porate  responsibility  programs  of  their 
organizations,"  the  Markkula  Center’s 
Hanson  adds. 

He  says  Corporate  America  is  only 
now  slowly  moving  from  making  com¬ 
mitments  to  certain  ethics  and  values 
to  actually  putting  them  into  practice. 

“Companies  recognize  that  they  have 
to  be  on  record  as  being  committed,  but 
they’re  not  yet  as  convinced  that  they 
have  to  manage  it  like  other  parts  of 
their  business,”  Hanson  explains. 

But  when  companies  do  decide  to 
move  in  that  direction,  that's  when 
CIOs  can  shine,  offering  ideas  on  what 
metrics  to  use  and  what  to  measure. 

“That’s  where  IT  can  be  a  real 


Ven70nwireless 


verhonwireless 


My  specialist  showed  me  how  to  order 
ingredients,  track  waitstaff,  and  plan  a  wedding, 
a  baby  shower  and  an  anniversary  on  the  go. 

Now  we're  cooking. 


of  its  customers  in  a  matter 
of  weeks,  and  it  ultimately 
wrote  off  over  $2  billion  in 
inventory.  After  that  experi¬ 
ence,  Cisco’s  supply  chain 
team  vowed  that  it  would 
never  get  blindsided  again. 

“There  is  a  huge  difference 
between  now  and  2001,”  says 
Karl  Braitberg,  Cisco’s  vice 
president  of  customer  value 
chain  management.  Back 
then,  Cisco’s  supply  chain 
model  was  built  on  a  “push” 


chain  operations  becomes 
increasingly  complex.  And 
shorter,  more  frequent  prod¬ 
uct  cycles  targeting  more- 
sophisticated  markets  create 
a  need  to  manage  more 
products  and  parts  from 
remote  locations.  Add  the 
pressure  of  shorter  cash-to- 
cash  cycles  —  the  time  from 
when  a  business  extends 
credit  to  build  inventory 
until  the  time  it  gets  paid  — 
into  the  equation,  and  the 


VICE  PRESIDENT  OF  CUSTOMER 
VALUE  CHAIN  MANAGEMENT. 
CISCO  SYSTEMS  INC. 

ble  and  timely  flow  of  infor¬ 
mation  becomes  critical. 

To  have  visibility  as  well 
as  command  and  control, 
supply  chain  operations 
must  be  tightly  integrated 
with  the  IT  infrastructure. 
That  isn't  the  case  at  many 
companies,  and  yet  it  may 
be  the  factor  that  deter¬ 


ge!  orders  in  a  timely  man¬ 
ner  and  market  opportuni¬ 
ties  will  be  missed.  Yet  if  a 
company  carries  too  much 
and  demand  drops,  then 
the  inventory  must  be  “bled 
down,"  or  reduced  in  price, 
until  it  has  a  buyer. 

During  a  strong  economy 
and  when  cash  flow  is 
loosened,  many  companies 
can  get  by  without  rigor¬ 
ous  inventory  management 
practices,  says  Larry  Lapide, 


■  SUPPLY  CHAIN 


Transportation  &  Logistics  T»  |  i 

in  Cambridge,  Mass.  But  IjJcIjCSL 

during  a  recession,  he  adds,  n'P,.  'f!  __ 
“companies  had  better  bleed  IOCS 


ble,"  Strickland  says.  Howev¬ 
er,  “because  of  the  impetus 
on  freeing  up  working  capi¬ 
tal,  we  have  been  focused  on 
lowering  our  inventory  and 
levels.  We  figured  we  could 
do  this,  and  it  turned  out  to 
not  be  the  bad  experience 


O'Reilly  Auto 
Parts  increased  inventory 
turns  by  44°o  with  the  help  of  I 
replenishment  software. 


down  its  own  costs  and 
maintain  profit  margins. 

“We  had  been  loath  to 
drive  inventory  down  to 
this  level,"  Strickland  says. 

However,  the  company  had 
gained  invaluable  experience 
by  deploying  an  integrated 
inventory  management  sys¬ 
tem  prior  to  the  downturn. 

The  result  was  that  the  key 
decision-makers  throughout 
its  supply  chain  were  operat¬ 
ing  with  the  same  informa¬ 
tion,  planners  focused  only 
on  exceptions,  and  supplier  improved  forecast  accuracy 


and  material  issues  were  by  10.4%. 
quickly  resolved.  The  sys-  “If  someone  had  told  us 

tem,  Strickland  says,  does  the  nine  months  ago  that  we 
heavy  lifting,  and  as  a  result,  could  lower  inv 
the  unit  has  cut  planning  cy-  fast  as  we  could 
cles  from  weeks  to  days  and  sales  decline,  w 


“Business  is  increasing  quests  immediately,  with  3% 
because  of  the  downturn,"  handled  through  separate 
Beck  says.  “People  aren’t  channels.  At  the  same  time, 


[are!  putting  more  money 
into  fixing  old  cars." 

This  isn’t  to  say  that 
O’Reilly  lacks  supply  chain 
challenges  or  that  it  can  let 
down  its  guard.  As  the  result 
of  an  acquisition  last  year, 
the  company  increased  its 
total  store  count  to  more  than 
3,300  and  now  operates  in 
38  states.  To  bolster  its  com¬ 
petitive  advantage,  O’Reilly’s 


plenish  inventory  on  a  nightly 
basis,  while  at  the  same  time 
managing  an  increasing 
number  of  products. 

The  partnership  between 
the  supply  chain  opera¬ 
tion  and  IT  was  critical  to 
O’Reilly’s  strategy.  The 


UNDERINVESTING 

Companies  say  that  driving 
costs  out  of  the  supply  chain 
is  an  important  goal,  but 
the  big  question  is  whether 
—  especially  during  a  reces¬ 
sion  —  they  can  afford  to  in¬ 
vest  in  their  supply  chain  IT 
infrastructures  to  help  make 
that  happen. 

Dwight  Klappich,  an 
analyst  at  Gartner  Inc.,  says 
he  expects  IT  spending  on 
supply  chain  applications  to 
decrease  through  2010  and 
that  spending  won’t  pick  up 
again  until  2011.  Between 
now  and  then,  IT  depart¬ 
ments  are  likely  to  focus  on 


You  Have  to 
Spend  to  Save 


lord  to  buy  tt  whan  they  madK  most 
A  recant  study  of  inventory  optimization  software,  which 
helps  determine  what  Inventory  should  be  where  in  the  sup- 


investment  in  a  relatively  short  period  of  time.  Results  varied 
by  company,  but  some  of  them  reduced  their  inventory  levels 
by  up  to  25%  in  one  year,  whde  others  enjoyed  a  discounted 
cash  flow  above  50%  in  less  than  two  years. 

The  report  says  it  costs  about  S300.000  to  S500.000  for 

inventory  optimization  software,  plus  about  the  same  amount 
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■  SECURITY  MANAGER  S  JOURNAL  MATHIAS  THURMAN 

Woes  Hang  Up 
New  Phone  Poicy 

A  global  company  is  sure  to  have  a  lot 
of  different  kinds  of  mobile  devices. 

And  that’s  just  the  start  of  the  problems. 


OVER  THE  past 
seven  months,  I 
have  led  a  team  of 
IT  representatives 
in  making  sure  that  all 
mobile  devices  are  aligned 
with  our  new  security 
policy.  I  thought  this  was 
going  to  be  straightfor¬ 
ward  —  a  few  mouse  clicks 
to  check  off  some  boxes, 
and  our  policy  would  be  in 
effect  on  our  entire  inven¬ 
tory  of  mobile  devices. 

But  because  months  have 
gone  by  since  our  previous 
CIO  (more  on  that  later) 
signed  off  on  our  security 
policy,  you  can  probably 
guess  that  things  weren’t  as 
easy  as  I  expected. 

The  policy  is  pretty 
simple.  It  states  that  all  mo¬ 
bile  devices  that  are  used 
to  connect  directly  to  our 
network  or  that  otherwise 
synchronize  data  with  the 
network  must  have  four¬ 
digit  passwords,  must  time 
out  after  30  minutes  of  inac¬ 
tivity,  must  wipe  themselves 
of  all  data  after  10  unsuc¬ 
cessful  log-on  attempts,  and 
must  be  capable  of  being 
controlled  by  our  IT  depart¬ 
ment  and  of  being  remotely 
wiped  if  lost  or  stolen. 

The  first  problem  is  vari¬ 
ety:  We  use  something  like 


25  or  30  different  kinds  of 
phones  worldwide.  While 
most  of  them  are  BlackBer- 
ries,  iPhones  or  Windows 
smartphones,  there  are 
plenty  of  variations.  Nokia, 
Samsung,  Motorola,  LG, 
HTC  and  PCD  are  just 
some  of  the  vendors  we 
use.  That  diversity  makes  it 
pretty  much  impossible  to 
fully  test  every  phone  with 
every  operating  system. 

On  the  other  hand,  there 
are  only  two  methods  by 
which  mobile  phones  can 
connect  to  our  internal 
network:  one  for  BlackBer- 
ries,  and  one  for  every  oth¬ 
er  device.  The  latter  uses 
Microsoft  ActiveSync.  One 
of  the  major  differences  is 
that  ActiveSync  passwords 
can’t  be  reset.  If  a  user  for¬ 
gets  his  password,  he  must 
wipe  the  device  to  the  fac¬ 
tory  default  setting.  Ouch! 
That  was  a  factor  in  one 
notable  complication  we 
encountered  as  we  began 


the  factory  default 
setting.  Ouch! 


testing  some  widely  used 

Nokia  phones  that  some 
employees  were  using  in 
Singapore  had  come  pre¬ 
configured  with  default 
passwords.  The  passwords 
weren’t  activated  but  were 
nonetheless  bound  to  the 
devices.  When  we  pushed 
the  ActiveSync  policy  to 
those  phones,  they  locked, 
and  the  users  thought  that 
they  were  supposed  to  cre¬ 
ate  new  passwords.  Many 
of  them  ended  up  trying  to 
input  a  password  10  times; 
guess  what  happened. 

STARTING  OVER 

After  many  trials  and 
tribulations  during  our 
limited  tests  (the  Nokia 
situation  is  only  one  ex¬ 
ample),  I  suddenly  found 
myself  back  at  square  one. 
That’s  because  our  previ¬ 
ous  CIO  had  procrastinated 
on  approving  an  executive 
communication  authoriz¬ 
ing  us  to  deploy  the  mobile 
device  policy  to  a  handful 
of  BlackBerry-using  execu¬ 
tives  before  undertaking  a 
global  rollout.  (We’ve  had 
no  problems  with  Black- 
Berries.)  He  probably  didn't 
care  to  get  involved  in  the 
issue  because  he  knew  he 


Trouble 

Ticket 

ATIH8UE:lt  he taken 

mobile  devices,  and 
meanwhile  a  new  CIO 


would  be  leaving  soon. 

When  I  approached 
our  new  CIO,  he  began  to 
question  me  on  the  need 
for  passwords  for  mobile 
phones.  He  wasn't  reacting 
to  our  deployment  woes; 
he  simply  didn’t  see  the 
need  for  such  a  policy.  I  had 
to  explain  about  the  risks 
involved  should  an  unpro¬ 
tected  BlackBerry  phone 
fall  into  the  wrong  hands. 

To  underscore  the  po¬ 
tential  for  theft  of  intel¬ 
lectual  property,  I  used  my 
BlackBerry  to  browse  to  an 
unprotected,  internal  Web 
site  that  is  loaded  with 
sensitive  materials  that  it 
is  my  job  to  protect.  With¬ 
out  passwords,  I  said,  a 
competitor  who  came  into 
possession  of  one  of  our 
BlackBerry  phones  would 
have  unimpeded  access  to 
all  such  sites  and  the  infor¬ 
mation  that  they  contain. 

Sometimes  a 

security  man-  HHHH 
ager  just  has  to  O  JOIN  IN 
conjure  up  some 
scary  scenarios 


ary  scenarios  ,  a 
make  a  point. 


whose  name  and  employer 
have  been  disguised  for 
obvious  reasons.  Contact 
him  at  mathias_thurman@ 
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How  Microsoft 


F  YOU  BELIEVE  the  pundits,  you’d  think  that  Microsoft 
was  one  step  from  the  grave,  a  company  teetering  on  the 
edge  of  financial  ruin  and  no  longer  technologically  rel¬ 
evant.  After  all,  its  most  recent  financial  results  show  that 
Microsoft  has  had  the  worst  year  in  its  history.  For  the  first  time, 
revenue  from  Windows  dropped  from  the  previous  year  — 

$3.1  billion  for  the  quarter  |  tive  to  Microsoft  Office.  |  impressive  piece  of  work. 

Sounds  grim,  doesn’t 
I  it?  The  truth,  though,  is 


that  ended  on  June  30, 
compared  with  $4.36  bil¬ 
lion  for  the  same  quarter ; 
year  earlier. 

The  sagging  economy  is 
only  partly  to  blame.  Many 
problems  are  of  Micro¬ 
soft's  own  making.  From  a 
business  point  bf  view,  for 
example,  Vista  was  an  un¬ 
mitigated  disaster.  Enter¬ 
prises  have  avoided  it  like 
the  plague.  The  New  York 
Times  noted  that  a  study 
by  Forrester  Research 
found  that  86%  of  corpo¬ 
rate  PCs  still  run  XP. 

Then,  of  course,  there’s 
Google,  which  owns  the 
Internet  search  market 
even  though  Microsoft 
has  spent  untold  amounts 
of  money  trying  to  catch 
up.  And  Google  has  tar¬ 
geted  the  heart  of  the 
Microsoft  empire  by  an¬ 
nouncing  that  it’s  develop¬ 
ing  an  operating  system 
called  Chrome  and  by 
pushing  Google  Apps  as  a 
lower-cost  or  free  alterna- 


that  in  the  midst  of  all  the 
bad  news,  it  looks  as  if 
Microsoft  has  finally  got¬ 
ten  its  mojo  back.  There’s 
evidence  that  it  may  be 
recovering  from  its  worst 

For  a  start,  the  new 
Windows  7  operating 
system  is  fast  and  respon¬ 
sive  and  has  fixed  many 
of  Vista's  problems.  It 
won't  be  available  until 
late  October,  yet  for  a 
while  it  topped  Amazon’s 
software  best-seller  list. 

It  still  hovers  around  25th 
to  30th  —  impressive  for 
software  that  won’t  be 
available  for  months. 

Microsoft  also  re¬ 
vamped  its  search  engine. 
Now  called  Bing,  it’s  an 


■  So,  what 
happened?  Why 
is  Microsoft  hittim 
its  stride  again? 


For  the  first  time,  Micro¬ 
soft  has  a  search  site  that 
can  rival  Google’s  in  terms 
of  technology.  And  Micro¬ 
soft’s  recently  announced 
deal  with  Yahoo  will  help 
the  company  gain  more 

Microsoft  also  re¬ 
leased  a  very  solid  beta 
of  Microsoft  Office  2010, 
and  Office  will  finally  be 
available  as  a  Web-based 
application.  That  will 
likely  be  enough  to  fend 
off  Google  Apps. 

Finally,  Microsoft  put 
Apple  on  the  defensive 
with  its  aggressive  “Lap¬ 
top  Hunters”  ads,  which 
play  up  the  price  differ¬ 
ence  between  Apple  and 
Windows-based  laptops. 

So,  what  happened? 
Why  is  Microsoft  hitting 
its  stride  again? 

The  primary  reason  is 
cultural.  Microsoft  was 
always  at  its  best  when 
it  believed  it  was  an  un¬ 
derdog.  Bill  Gates  was 


excellent  at  creating  that 
striver  culture,  but  in  his 
later  years,  one  had  the 
sense  that  his  attention 
had  wandered.  And  once 
he  left,  the  company  cul¬ 
ture  was  adrift. 

Now,  for  the  first  time 
in  a  long  while,  Microsoft 
is,  in  fact,  an  underdog. 
Google  has  been  on  top  of 
Internet  search  and  ser¬ 
vices,  Apple  has  gotten  all 
the  buzz  for  its  new  prod¬ 
ucts,  and  Vista  has  been 
widely  reviled. 

Microsoft  finally  recog¬ 
nized  that  it  couldn't  just 
sit  on  its  pot  of  cash  and 
its  giant  market  share.  If  it 
didn’t  start  releasing  solid 
products  and  rethink¬ 
ing  its  Internet  strategy, 
Google  could  eventually 
own  even  the  desktop. 

In  short,  Microsoft  got 
its  hunger  back. 

That's  not  to  say  that  it's 
perfect.  It  needs  to  more 
aggressively  Web-enable 
its  applications  and  slim 
down  Windows,  possibly 
releasing  the  operating  sys¬ 
tem  as  a  series  of  constant¬ 
ly  upgraded  mix-and-match 
components.  It  needs  to 
develop  breakthrough 
products  like  Apple  has. 

It’s  hard  to  know 
whether  that’s  possible  in 
the  long  run.  But  for  now, 
at  least,  Microsoft  has  its 
mojo  back.  ■ 

Preston  Oral*  is  a  contrib¬ 
uting  editor  for  Computer- 
world.com  and  the  author 
of  more  than  35  books,  in¬ 
cluding  How  the  Internet 
Works  f Que.2006). 
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(877)  788-1430  RosettaStone.com/cws089 
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GET  SOCIAL, 
GET A  JOB 


DISMAL  ECONOMY  has 
>ught  thoughts  of  the  un- 
iployment  line  to  people  in 


any  new  situation.  The  easiest  way 
for  people  to  participate  in  social 
media  venues  is  to  really  familiarize 
themselves  with  the  site  they  want  to 
utilize.  Look  and  listen  to  what's  going 
on  in  the  community.  What  are  the 
conversations  people  are  engaged  in. 
and  who  are  the  participants?  As  they 
become  more  comfortable  with  the 
site,  then  it's  probably  a  good  time  to 
start  participating  in  other  ways,  such 
as  adding  content  commenting  and 
beginning  to  cultivate  relationships. 


tools  are  sites  such  as  Linkedln, 
Facebook  and  Twitter,  all  ol  which 
have  high  membership  numbers 
and  can  serve  to  start  useful  dia¬ 
logues  with  company  representa- 
tives  as  well  as  individuals.  For  a 
more  targeted  approach,  use  sites 


1 


and  what  is  not.  People 
who  use  vulgar  language, 
discuss  their  views  on  poli¬ 
tics  or  complain  about  work 
on  networking  sites  often 
alienate  and  send  Ihe  wrong 
message  to  current  and 
even  potential  employers.  “11 
you  want  to  see  an  example 
of  how  this  can  go  terribly 
wrong,  simply  Google  the 
term  'Cisco  Fatty.  "  she  says. 

Don'ttalkto  strang¬ 
ers!  What  your  mother  told 

as  an  adult,  says  Bulk.  Avoid 
inviting  people  to  be  a  contact 
il  you  don't  know  them  or 


of  you  being  picked  up  off  a 
barroom  floor.  If  you  are  go¬ 
ing  to  have  these  people  as 
connections  on  sites  such  as 
Facebook.  then  learn  to  utilize 
the  prtvacy/profile  sellings 
You  can  control  who  is  per- 


caters  to  your  needs  and  will  give 
you  more  visibility  and  insight  into 
your  industry.  For  example,  we  just 
launched  a  social  networking  site 
on  Connect  called  myCommunity. 
It's  a  place  for  the  members  of  out 
organization  to  come  together  and 
post  conversations,  read  blogs  spe¬ 


cific  toHP  technology  and  engage 
with  each  other.  Another  example 
of  a  niche  social  networking  site 
would  be  something  like  Advogato. 
which  is  a  forum  for  those  interested 
in  open-source  software  develop¬ 
ment.  Additionally,  sites  such  as 
Wikipedia  and  Mashable.com  offer 
lists  of  popular  social  networking 
sites  with  brief  descriptions  that 
might  be  helpful  in  finding  a  site  that 
is  a  good  fit  for  you. 


members  can  choose  their  own 
level  of  participation.  In  my  personal 
experience  with  Connect,  some 
of  our  users  only  participate  when 
they  have  a  question  they  feel  other 
users  might  be  able  to  help  address, 
and  that's  OK  because  our  site  is 
the  perfect  forum  for  this  type  of 
dialogue.  On  the  other  hand,  many 
ol  our  members  use  the  site  daily 
to  keep  abreast  ol  what's  going  on 
in  the  industry,  to  foster  and  grow 
relationships  or  to  contribute  to  con¬ 
versations  in  the  community. 
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GET A  JOB 


tt  has  made  many  of  them  feel  the 
need  to  constantly  glance  over  their 
shoulders,  notes  Nina  Buik,  a  careers 
expert  and  president  of  the  Hewlett- 
Packard  user  group  Connect.  In  this 
type  of  economic  climate,  everyone  can  begin  to  seem  like  a 
potential  competitor,  and  some  people  will  react  by  burrowing 
into  their  cubicles  and  keeping  a  low  profile. 

That’s  the  wrong  way  to  go,  maintains  Buik.  Instead,  she  ad¬ 
vises  employees  to  connect  with  others  both  inside  and  outside 
of  the  office  by  joining  a  user  group  and  using  the  tool  of  social 
networking.  Buik  spoke  to  contributing  editor  Jamie  Eckle. 


any  new  situation.  The  easiest  way 
for  people  to  participate  in  social 
media  venues  is  to  really  familiarize 
themselves  with  the  site  they  want  to 
utilize.  Look  and  listen  to  what's  going 
on  in  the  community.  What  are  the 
conversations  people  are  engaged  in. 
and  who  are  the  participants?  As  they 
become  more  comfortable  with  the 
site,  then  it's  probably  a  good  time  to 
start  participating  in  other  ways,  such 
as  adding  content,  commenting  and 
beginning  to  cultivate  relationships. 


logues  with  company  representa¬ 
tives  as  well  as  individuals.  For  a 
more  targeted  approach,  use  sites 
that  can  serve  as  both  a  support 
system  and  resource  for  your  per¬ 
sonal  brand.  There  are  countless 
sites  out  there,  so  try  to  find  one  that 
caters  to  your  needs  and  will  give 
you  more  visibility  and  insight  into 
your  industry.  For  example,  we  just 
launched  a  social  networking  site 
on  Connect  called  myCommunity. 
It's  a  place  for  the  members  of  our 
organization  to  come  together  and 
post  conversations,  read  blogs  spe¬ 


cific  to  HP  technology  and  engage 
with  each  other.  Another  example 
of  a  niche  social  networking  site 
would  be  something  like  Advogato, 
which  is  a  forum  for  those  interested 

ment.  Additionally,  sites  such  as 
Wikipedia  and  Mashable.com  offer 
lists  of  popular  social  networking 
sites  with  brief  descriptions  that 
might  be  helpful  in  finding  a  site  that 
is  a  good  fit  for  you. 


be  truly  beneficial?  The  great 
thing  about  user  groups  is  that 
members  can  choose  their  own 
level  of  participation.  In  my  personal 
experience  with  Connect,  some 
of  our  users  only  participate  when 
they  have  a  question  they  feel  other 
users  might  be  able  to  help  address, 
and  that's  OK  because  out  site  is 
the  perfect  forumforthistypeof 
dialogue.  On  the  other  hand,  many 
of  our  members  use  the  site  daily 
to  keep  abreast  of  what's  going  on 
in  the  industry,  to  foster  and  grow 
relationships  or  to  contribute  to  con¬ 
versations  in  the  community. 
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ATTENTION... 

Law  Firms 
IT  Consultants 
Staffing  Agencies 


Are  you  frequently 
placing  legal  or 
immigration  advertisements? 

Let  us  help  you  put 
together  a  cost-effective 
program  that  will  make  this 
time-consuming  task  a 
little  easier! 

Place  your 

Labor  Certification  Ads  here! 


SharkTank 

Who  Wants  to  Know? 

Programmer  pilot  hsh  goes 
online  to  a  message  board 
for  a  development  system 

few  special  ways  to  keep 
them  working.  “One  brand 
of  terminals  could  often  be 
revived  by  simply  fuming 

TRUE  TALES  OF  IT  LIFE  AS  TOLD  TO  SHARKY 

Eight  K  Is  ;  sales,  says  the  pilot  fish  who 

Pilot  fish  is  the  CIO  at  a  small  |  manages  the  box  office.  Out 
company  with  offices  in  Mew  1  goes  a  bid  request;  in  come 

York  and  Mew  Jersey.  "My  one  1  bids  from  three  vendors.  “A 

IT  person  in  NYC -who  does  j  committee  evaluated  the  three 
network  admin,  desktop  sup-  ;  vendors,"  fish  reports.  "One 

that's  used  for  one  of  his 
company’s  apps,  and  he  runs 
smack  into  recently  imple¬ 
mented  content-blocking.  “It 
presents  the  message  that 
the  site  is  blocked  and  tells 
you  to  either  close,  click  one 
link  to  continue  or  dick  a  link 
to  see  the  company's  access 
policy,"  says  hsh.  "1  clicked  to 
continue  and  finished  what  1 

them  off  and  back  on,"  says 
hsh.  “1  taught  this  trick  to  the 
secretary  of  one  large  depart¬ 
ment.  One  day  she  called  to 
report  a  dead  terminal.  1  went 
to  her  department,  turned  the 
device  off  and  back  on,  and 
it  came  back  to  life.  She  said 
she  had  done  that  several 
times  to  no  avail.  1  responded, 
'Obviously,  you  didn't  do  it 

-  is  out  for  an  extended  time  1  interview.  One  vendor  showed 
due  to  an  illness,"  hsh  says.  “1  !  up  in  blue  jeans  and  a  T-shirt, 
asked  the  CFO  HI  could  bring  ;  The  last  vendor  showed  up 
in  a  temporary  IT  person  until  ;  with  a  staff  in  suits.  Vendor  A 
she  returned.  His  answer  was,  I  was  rated  0  for  its  interface 
‘Could  you  bring  in  someone  !  with  our  ticket  system.  Ven- 
for  four  hours  per  day  instead  j  dor  B  was  rated  3  for  the  sys- 
of  eight?’ 1  said.  “Sure.  When  j  tern  interface,  and  Vendor  C 
do  you  want  us  to  have  prob-  ;  was  rated  a  perfect  5  -  by 
lems,  then,  in  the  morning  ;  everyone  but  me,  the  box  of- 

or  afternoon?  To  which  he  !  hce  manager,  who  realized 

replied. ’Oh,  good  point.’"  j  that  Vendor  BbuHf  our  ticket 

needed  to  do.  But  1  was  curi¬ 
ous  why  this  particular  site 
was  being  blocked.  Sol  went 
back  in  and  this  time  dicked 
on  ’Click  to  loam  more  about 
your  access  policy.' "And  the 
message  it  gives  hsh?  Content 
blocked.  Click  here  to  access 
our  Internet  resource  policy. 
Sputters  baffled  hsh,  “It  actu¬ 
ally  blocked  the  policy!" 

That  FT  Touch 

she  didn't  hit  me." 

■  Hit  Shorty  with  your  true 
tale  of  IT  life  at  sharky@ 
computerworid.com.  You’ll 
score  a  sharp  Shark  shirt  if 

I  use  it. 

0  TIRED  OF  BUNOLINO  BOSSES 

and  cMess  co-workers? 

Swim  on  over  to  Shark  Bart 
and  share  your  tales  of  woe 

Priorities  I  with  it  perfectly  but  had  the 

This  organization  needs  an  :  temerity  to  show  up  in  jeans 

online  application  to  do  ticket  !  and  a  T-shirt.’ 

it's  back  in  the  days  of  green- 
screen  terminals,  and  this 
support  pilot  hsh  knows  a 

■safe, 

•m.  arm 


Steven  I.  Vaiighan-Nichols 


Botnets  Must  Die 


DATELINE  2011:  Today’s  Internet  report  is  Green 
in  the  European  Union,  Yellow  in  North  America 
but  still  Red  in  the  Pan-Pacific  countries  and  Israel. 
In  the  U.S.,  Facebook  and  Twitter  are  still  under 
siege  from  the  Windows-based  Katrina  Storm  botnet.  Google, 

and  government  Web  sites 
were  hammered  earlier 
this  year.  The  early-August 
attack  on  Twitter  and  Face- 
book.  which  stopped  Twit¬ 
ter  in  its  tracks  and  brought 
Facebook  to  its  knees,  was 
only  the  latest  in  a  series  of 
damaging  DDoS  attacks. 

This  is  only  going  to  get 
worse.  Windows'  insecu¬ 
rity  has  allowed  millions  of 
PCs  to  turn  into  soldiers  in 
botnet  armies.  Most  of  the 
time,  their  controllers  are 
happy  to  let  these  systems 
quietly  churn  out  hundreds 
of  millions  of  spam  e-mails 
a  day.  Or,  as  in  the  case  of 
the  Clampi  Trojan,  which 
has  infected  up  to  a  million 
Windows  PCs,  silently  steal 
credit  card  information. 

Now,  however,  botnets 
are  being  used  for  more 
than  just  the  criminal  activ¬ 
ities  of  social  misfits  eager 


however,  reports  that  search 
delays  are  now  down  to  an 
average  of  three  seconds. 

Things  have  gone  from 
bad  to  worse  in  Japan  and 
Reunified  Korea,  though,  as 
attacks  from  former  North 
Korean  cyberwarfare  units 
using  the  Windows-based 
MyDoom  VII  botnet  have 
locked  down  all  financial 
and  government  Web  sites. 
That's  still  better  than  Isra¬ 
el,  where,  according  to  land¬ 
line  phone  reports,  attacks 
from  the  so-called  Sons  of 
Eichmann  cyberterrorist 
group  using  the  Windows 
botnet  New  Cyxymu  have 
totally  frozen  the  country's 
Internet  access. 

Sound  like  science  fic¬ 
tion?  I  wish  it  were.  I  think 
it’s  a  fair  prediction  of 
where  we're  going  if  we 
don’t  stop  Windows-based 
botnet  distributed  denial- 
of-service  attacks. 

We've  already  seen  coun¬ 
tries  like  Estonia  and  Geor¬ 
gia  knocked  off  the  Internet 
by  Russia-based  hackers 
using  botnets.  Google  was 
slowed  to  a  crawl  by  a 
similar  attack,  and  South 
Korean  and  U.S.  business 


I  If  we  don’t  fix 


Internet  of  2011 
is  going  to  be  one 


to  make  a  quick  buck  off  of 
naive  users.  They're  being 
used  to  attack  businesses, 
countries  and,  in  the  case 
of  the  attack  that  busted 
up  the  social  networks  this 
month,  one  individual,  a 
pro-Georgia  blogger. 

Think  about  that.  Ev¬ 
ery  major  Western  social 
network  was  brought  to 
its  knees  because  a  small 
group  of  people  were 
ticked  off  at  one  guy. 

We  can’t  let  this  con¬ 
tinue.  Catching  the  botnet 
masters  has  proved  to  be 
close  to  impossible.  So 
we're  going  to  have  to  try 
another  approach. 

The  only  way  I  can  see  of 
doing  it  is  to  choke  off  the 
botnets.  Since  all  —  I  repeat 
all  —  botnets  run  on  poorly 
secured  Windows  systems, 
1  think  Internet  service  pro¬ 
viders  have  to  either  block 
compromised  PCs  from  get¬ 
ting  to  the  Internet  in  the 
first  place  or  force-feed  se¬ 
curity  upgrades  into  them. 

We  already  know  Micro¬ 
soft  can’t  fix  Windows’ 
security  problems.  Every 
month  brings  yet  another 
Patch  Tuesday  full  of  fixes 


for  major  vulnerabilities, 
yet  Microsoft  never  catches 
up  with  Windows’  security 
holes.  It  never  will.  Win¬ 
dows  started  out  without 
network  security,  and  ev¬ 
ery  fix  since  Windows  for 
Workgroups  has  been  one 
patch  on  top  of  another, 
right  through  to  Windows  7. 

We  also  know  education 
won't  do  the  job.  Anyone 
with  a  higher-than-room- 
temperature  IQalready  has 
security  software  and  keeps 
up  to  date  with  patches. 

Let’s  be  kind  and  assume 
that  90%  of  the  Windows- 
using  population  does  this. 
That  leaves,  what,  about 
100  million  Windows  PCs 
in  the  world  available  for 
botnet  deployment? 

Yuck!  I  don't  like  those 
odds! 

No,  the  only  solution  is 
for  ISPs  to  start  checking 
Windows  PCs  in  at  the 
Internet  gate,  and  if  they 
don't  pass  a  minimum 
security  check,  we  don’t 
allow  them  in.  If  an  ISP 
doesn’t  join  up  with  this 
posse,  cut  it  off  from  the 
rest  of  the  Internet.  This  re¬ 
ally  is  a  case  where  if  you’re 
not  part  of  the  solution, 
you’re  part  of  the  problem. 

Don't  like  it?  Tough.  It’s 
either  that  or  we’re  all  go¬ 
ing  to  get  stuck  with  an  In¬ 
ternet  that’s  tied  into  knots 
by  2011.  ■ 

Stmwi  J.  Vaughan-Nfehots 

has  been  writing  about 
technology  and  the  busi¬ 
ness  of  technology  since 
CP/M-80  was  cutting-edge 
and  300bit/sec.  was  a  fast 
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Samsung  F2380  Professional 
Widescreen  LCDDisplags 


Introducing  the  innovative  new  cPVA  display  technology 

from  Samsung. 

nowwaytodelivereye  opemngfinancialreports  OurafFordable 

j-  -.pi  a .  r  ec  imology  delivers  image  quality  similar  to  monitors  nearly  twice  the 
:e:  an  incredible  3000 1  static  contrast  ratio  and  unbelievable 
. -  ■  .  p,  es  well  So  no  matter  what  your  numbers  say.  our  new  cPVA 
■  will  make  them  worth  looking  at 

See  the  cPVA  difference  for  yourself  at  samsung.com/cpva 


SAMSUNG 


Smarter  technology  for  a  Smarter  Planet: 

Can  an  entire  business 
be  given  a  nervous  system? 

On  a  smarter  planet,  the  datacenter  is  not  simply  the  heart  of  IT— it’s  also  the  central  nervous  system 
of  the  entire  business.  IBM  is  helping  companies  view  their  extended  infrastructure  not  as  a  collection 
of  disconnected  pieces,  but  as  an  integrated  system  that  connects  the  datacenter  to  all  of  the  digital 
and  physical  assets  of  the  business,  creating  a  more  dynamic  infrastructure.  From  railway  systems 
that  can  predict  and  schedule  their  own  maintenance  to  assembly  lines  that  understand  how  to  adjust 
to  changing  needs  to  power  grids  that  match  supply  and  demand,  we’re  already  helping  customers 
improve  service,  increase  flexibility  and  reduce  operating  costs  by  as  much  as  50%. 

A  smarter  business  needs  smarter  software,  systems  and  services. 


